Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa
File:                     ba69d26a-7894-3495-bdb5-7db977ec90ec.roa (raw, json)
Hash identifier:          CgCgxPlrpXS2hdNH8Hd+y26DgUvw/uDOp4jeDxRNOtQ=
Subject key identifier:   B2:F0:79:A5:47:44:2B:73:20:5F:8C:F3:B8:E2:6D:B0:8E:BD:79:2B
Certificate issuer:       /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial:       010D0C9F4328584D651519CC07F1326051CEB000
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     16509
IP address blocks:        2605:dd40:8f00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:19:cc:07:f1:32:60:51:ce:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=7cf8f6fd-bfb0-4bc9-bc55-00971636212a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:73:c2:18:28:c6:1c:04:11:df:54:cf:2f:
                    08:ea:22:f5:c2:00:ac:df:44:e7:1e:24:d0:be:5c:
                    1a:68:6c:3c:0b:c2:c8:70:61:16:f0:e7:fc:78:9d:
                    9d:5e:32:04:6f:14:93:10:2a:69:7e:63:c6:4d:0a:
                    82:c3:62:06:17:70:4b:51:b5:f0:14:3f:e5:a0:f7:
                    43:4d:ea:60:71:f8:69:69:e1:39:21:5b:b1:79:ce:
                    3f:9c:94:f8:d9:bc:d3:3f:14:da:31:35:ce:9e:6e:
                    f5:15:bf:28:3e:6e:0a:2c:6b:26:b2:27:1d:b7:be:
                    08:87:94:d5:90:77:ff:d8:2d:a0:fb:27:e2:5e:b9:
                    c8:bb:30:59:bc:f0:f7:6a:28:16:c7:bc:86:0f:6b:
                    e0:66:ac:00:76:30:c3:e3:6a:94:17:52:f6:54:ee:
                    37:e2:e7:6c:aa:09:d9:ba:f4:c3:04:64:ed:0c:ef:
                    19:48:f4:95:9c:ef:b5:fd:ed:9f:f6:cb:a1:23:bf:
                    6f:15:02:d6:34:9f:72:66:65:05:c1:ad:52:76:e3:
                    6c:c0:0c:c6:4a:b4:cb:38:26:72:b5:10:de:1a:c3:
                    26:27:9c:2e:45:77:7c:0e:2e:30:3d:ff:c4:95:ad:
                    00:12:4a:7d:06:4a:20:58:d2:f3:a5:c6:be:8f:15:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F0:79:A5:47:44:2B:73:20:5F:8C:F3:B8:E2:6D:B0:8E:BD:79:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ba69d26a-7894-3495-bdb5-7db977ec90ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl

            X509v3 Authority Key Identifier:
                keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:dd40:8f00::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:4d:b9:86:2c:ba:a8:d9:a8:25:5d:e6:11:c4:6d:af:83:ff:
         7e:9d:e0:60:69:7b:d8:2f:44:8d:28:f5:6f:c3:0b:6d:a1:26:
         27:21:af:a9:ad:0a:50:fc:f4:75:77:08:f2:93:4a:21:4d:6a:
         05:f1:4a:3d:33:0a:03:cd:14:3f:22:93:b1:7c:4f:ef:f5:6e:
         20:77:ef:5b:b6:f2:19:07:ea:a7:84:99:b0:68:3f:4b:39:50:
         b0:c1:cb:01:11:58:0f:ad:34:38:1e:52:29:87:f9:02:e8:6b:
         9d:a2:4b:fd:23:56:60:d7:cf:33:9f:1b:9f:1d:6f:5d:13:89:
         4f:ba:ec:27:d7:59:05:be:f7:62:3a:83:fb:e9:e3:33:1f:5f:
         58:52:6d:a8:03:3e:10:f2:4b:36:a4:3a:4e:bc:70:96:77:26:
         26:10:36:79:51:ba:3c:82:67:7e:5a:46:89:ec:0b:ec:b1:e2:
         0d:58:8d:d9:af:d2:a1:9d:60:ce:05:8f:ac:dd:6d:bb:29:62:
         a3:af:04:f0:c9:ce:18:3c:c3:e0:90:4c:0a:bc:dc:f4:06:a3:
         f9:ad:b7:e4:32:79:0b:8d:04:e1:2f:5d:18:0e:1d:3f:ff:69:
         3b:3f:fc:fe:40:4f:9a:38:f5:e4:e3:6f:8d:6e:59:7d:98:fc:
         c0:7a:8c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:45 2026 by rpki-client